Route Origin Authorization
$ rpki-client -vvf rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB9327AA8BE11F0A84185D7DAE4EC9C.roa
File: 2CB9327AA8BE11F0A84185D7DAE4EC9C.roa (raw, json)
Hash identifier: xJnM3GyoPgjdwQe9Bl+ypyL8nvZc/lu+xEImsJxqbpY=
Subject key identifier: B9:77:66:DF:9D:2B:50:1B:F2:15:10:97:8F:C1:3A:C5:EA:AE:8A:D3
Certificate issuer: /CN=F36C58D6AF/serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Certificate serial: 1634
Authority key identifier: 48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
Authority info access: rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
Subject info access: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB9327AA8BE11F0A84185D7DAE4EC9C.roa
Signing time: Tue 14 Oct 2025 05:25:20 +0000
ROA not before: Tue 14 Oct 2025 05:25:14 +0000
ROA not after: Thu 14 Oct 2027 05:25:14 +0000
asID: 5065
IP address blocks: 102.165.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.mft
rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.crl
rsync://rpki.afrinic.net/repository/afrinic/K1eJenypZMPIt_e92qek2jSpj4A.mft
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/afrinic-ca.cer
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl
rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.mft
rsync://rpki.afrinic.net/repository/AfriNIC.cer
Signature path expires: Tue 21 Oct 2025 00:06:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 5684 (0x1634)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F36C58D6AF, serialNumber=48A2F2C4AA4AEA39BE46BFE5F99C92629BBED8FC
Validity
Not Before: Oct 14 05:25:14 2025 GMT
Not After : Oct 14 05:25:14 2027 GMT
Subject: CN=68eddec0-2bc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7a:5b:83:e7:e0:4b:83:5a:f0:b1:81:e6:33:
f2:39:69:2c:c2:52:7e:18:7c:4f:85:0a:90:df:00:
81:75:5e:6d:a8:52:d5:97:c9:0d:cc:9f:c0:e1:67:
69:5b:69:3f:25:6f:05:3d:70:10:bb:f5:a3:34:fb:
25:02:48:7a:4c:da:c8:f6:e6:1c:49:55:26:51:f7:
32:2c:13:01:e4:6f:ef:64:65:f8:77:ba:78:a8:53:
f6:f3:68:bd:9f:7c:b0:fe:eb:5e:39:7b:65:6d:b6:
c1:07:91:c6:56:30:66:ed:36:a2:8d:e3:d9:58:88:
78:e7:0c:7a:66:5d:c7:41:be:dd:d9:88:23:46:f7:
f3:50:c5:4f:80:98:6a:6c:b6:0f:c1:32:8d:5a:20:
6c:74:dc:c0:38:22:f7:23:1a:10:3b:fb:7f:c7:13:
fa:a3:1e:7c:57:03:3a:e8:99:d9:e4:c8:32:ad:8c:
1b:91:47:33:43:08:54:e3:e5:af:b1:7a:6d:2b:df:
e6:28:30:d0:a4:a7:f3:7c:fa:b6:f1:9b:ec:d6:3c:
5c:2a:5b:45:28:aa:c1:a8:ce:e2:5b:4f:68:69:b5:
60:22:7a:00:5b:ec:fc:2e:27:57:1c:a1:dc:da:7f:
80:3e:90:8c:d2:e9:cb:8d:53:fb:06:20:72:51:02:
51:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:77:66:DF:9D:2B:50:1B:F2:15:10:97:8F:C1:3A:C5:EA:AE:8A:D3
X509v3 Authority Key Identifier:
keyid:48:A2:F2:C4:AA:4A:EA:39:BE:46:BF:E5:F9:9C:92:62:9B:BE:D8:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.afrinic.net/repository/afrinic/SKLyxKpK6jm-Rr_l-ZySYpu-2Pw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://rpki.afrinic.net/policy/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.afrinic.net/repository/member_repository/F36C58D6/D69A4DFE731611E99133037CF8AEA228/2CB9327AA8BE11F0A84185D7DAE4EC9C.roa
RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
102.165.57.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:0e:39:68:e0:4c:b4:22:b4:59:a6:e1:4a:88:7d:c7:d7:3e:
bf:13:ee:c9:7f:8c:89:c7:ac:c0:7e:c6:df:6f:09:6e:bd:69:
02:8e:1c:e6:ee:d7:42:9d:81:4e:be:ac:ab:ff:03:11:98:0e:
60:d1:74:71:75:f1:ac:d1:5c:c5:e7:1b:8a:dc:07:b0:55:11:
ee:28:8e:2a:38:9d:c2:38:73:55:e2:ab:01:48:9c:2c:0f:43:
87:c7:f5:54:74:00:35:92:46:8a:2e:a1:d0:98:2d:1e:1a:b7:
20:0c:34:76:d9:cf:07:26:b6:7c:13:02:57:26:a4:b7:9d:f0:
cc:0c:5d:3a:d8:fe:e8:11:86:72:96:9e:87:a3:ff:db:1a:db:
10:e9:ea:7c:b7:e4:b1:5b:e5:eb:ed:58:41:c6:33:e7:81:ad:
04:40:c1:5a:5b:20:1e:5e:29:fd:ef:c5:46:14:78:4e:24:39:
a6:9b:be:33:2e:e8:5d:f9:a5:55:3c:f6:00:f9:68:2c:bf:ac:
45:d6:75:c7:2e:8f:ef:e2:1f:98:cf:f6:09:96:6f:19:36:7d:
de:40:13:1a:27:f3:56:a1:be:ee:32:07:4e:28:fe:05:a7:e1:
d0:30:28:8d:41:6f:ae:9d:d6:4c:e2:c9:7a:19:24:32:2d:bc:
33:9e:11:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 20:03:33 2025 by rpki-client